last executing test programs: 6.576665408s ago: executing program 2 (id=1109): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.704797678s ago: executing program 2 (id=1117): socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) gettid() openat$cgroup_devices(r0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.431284242s ago: executing program 2 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xffbf) 4.356578693s ago: executing program 3 (id=1121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) 4.100541117s ago: executing program 3 (id=1125): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 3.493521126s ago: executing program 0 (id=1132): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.304737519s ago: executing program 1 (id=1133): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xd1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xd19464501ebfdda0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 1.95276715s ago: executing program 3 (id=1134): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x99, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) 1.94403003s ago: executing program 2 (id=1135): perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 1.893675691s ago: executing program 0 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 1.832807982s ago: executing program 1 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.832365042s ago: executing program 3 (id=1138): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<-0||!') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='sched_process_fork\x00'}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.791625033s ago: executing program 0 (id=1139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) close(r0) 1.717179874s ago: executing program 2 (id=1140): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000300), &(0x7f0000000700)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 1.664823155s ago: executing program 1 (id=1141): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2882, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="5cff2065c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.664454035s ago: executing program 3 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.568876226s ago: executing program 3 (id=1143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 1.422473068s ago: executing program 1 (id=1144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r1}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) 1.223751122s ago: executing program 0 (id=1145): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0xf}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 1.005153805s ago: executing program 1 (id=1146): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) 973.751115ms ago: executing program 2 (id=1147): syz_clone(0x40280000, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 659.82219ms ago: executing program 0 (id=1148): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x15, 0x5, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 272.278806ms ago: executing program 0 (id=1149): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b28, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) 0s ago: executing program 1 (id=1150): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$unix(r3, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 88.740696][ T5776] cgroup: Unknown subsys name 'net' [ 88.915285][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.838372][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.567154][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.587659][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.600331][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.615972][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.625601][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.634143][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.649226][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.657758][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.666385][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.669984][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.685990][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.694115][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.755801][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.765890][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.775375][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.791411][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.800813][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.827448][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.836364][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.844206][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.852395][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.866263][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.874528][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.882743][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.325900][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 93.611211][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.621860][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.630578][ T5790] bridge_slave_0: entered allmulticast mode [ 93.639269][ T5790] bridge_slave_0: entered promiscuous mode [ 93.670597][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 93.690833][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.698643][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.707775][ T5790] bridge_slave_1: entered allmulticast mode [ 93.715940][ T5790] bridge_slave_1: entered promiscuous mode [ 93.820612][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.883090][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.894688][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 93.985412][ T5790] team0: Port device team_slave_0 added [ 94.023861][ T5790] team0: Port device team_slave_1 added [ 94.069385][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.078913][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.089547][ T5786] bridge_slave_0: entered allmulticast mode [ 94.097383][ T5786] bridge_slave_0: entered promiscuous mode [ 94.107031][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 94.120051][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.128276][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.136815][ T5786] bridge_slave_1: entered allmulticast mode [ 94.144230][ T5786] bridge_slave_1: entered promiscuous mode [ 94.179294][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.187375][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.217488][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.271829][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.293688][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.301627][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.333080][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.385812][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.419396][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.428671][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.438357][ T5794] bridge_slave_0: entered allmulticast mode [ 94.447898][ T5794] bridge_slave_0: entered promiscuous mode [ 94.457575][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.466598][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.474810][ T5794] bridge_slave_1: entered allmulticast mode [ 94.483002][ T5794] bridge_slave_1: entered promiscuous mode [ 94.556754][ T5786] team0: Port device team_slave_0 added [ 94.588418][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.614697][ T5786] team0: Port device team_slave_1 added [ 94.641950][ T5790] hsr_slave_0: entered promiscuous mode [ 94.649618][ T5790] hsr_slave_1: entered promiscuous mode [ 94.662332][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.698120][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.706921][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.716199][ T5798] bridge_slave_0: entered allmulticast mode [ 94.724048][ T5798] bridge_slave_0: entered promiscuous mode [ 94.726527][ T5791] Bluetooth: hci1: command tx timeout [ 94.764671][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.772184][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.780834][ T5798] bridge_slave_1: entered allmulticast mode [ 94.788931][ T5798] bridge_slave_1: entered promiscuous mode [ 94.800791][ T5791] Bluetooth: hci0: command tx timeout [ 94.844265][ T5794] team0: Port device team_slave_0 added [ 94.854829][ T5794] team0: Port device team_slave_1 added [ 94.876150][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.883774][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.914260][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.934338][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.942844][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.974417][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.985388][ T5791] Bluetooth: hci3: command tx timeout [ 94.985413][ T5789] Bluetooth: hci2: command tx timeout [ 95.009482][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.024298][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.110267][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.118019][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.151818][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.176108][ T5798] team0: Port device team_slave_0 added [ 95.186345][ T5798] team0: Port device team_slave_1 added [ 95.193276][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.201185][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.230083][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.348969][ T5786] hsr_slave_0: entered promiscuous mode [ 95.356257][ T5786] hsr_slave_1: entered promiscuous mode [ 95.363729][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.372822][ T5786] Cannot create hsr debugfs directory [ 95.406094][ T5794] hsr_slave_0: entered promiscuous mode [ 95.415221][ T5794] hsr_slave_1: entered promiscuous mode [ 95.422371][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.431813][ T5794] Cannot create hsr debugfs directory [ 95.439657][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.448240][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.478758][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.535718][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.543036][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.573588][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.801025][ T5798] hsr_slave_0: entered promiscuous mode [ 95.807650][ T5798] hsr_slave_1: entered promiscuous mode [ 95.813952][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.822197][ T5798] Cannot create hsr debugfs directory [ 95.963021][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.982187][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.019064][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.046186][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.193441][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.225100][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.263181][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.288827][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.351952][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.364340][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.402890][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.418285][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.526732][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.538872][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.550443][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.565754][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.742204][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.795631][ T5791] Bluetooth: hci1: command tx timeout [ 96.811679][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.827067][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.843951][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.886329][ T5791] Bluetooth: hci0: command tx timeout [ 96.910925][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.924099][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.931930][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.942793][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.950404][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.970226][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.000020][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.018876][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.026203][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.035182][ T5791] Bluetooth: hci2: command tx timeout [ 97.050841][ T5791] Bluetooth: hci3: command tx timeout [ 97.065972][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.086331][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.093737][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.117815][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.125345][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.189122][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.196765][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.210120][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.217310][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.268159][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.275415][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.302930][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.362138][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.687729][ T54] cfg80211: failed to load regulatory.db [ 97.886025][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.033781][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.097796][ T5790] veth0_vlan: entered promiscuous mode [ 98.109836][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.133755][ T5790] veth1_vlan: entered promiscuous mode [ 98.158352][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.268152][ T5790] veth0_macvtap: entered promiscuous mode [ 98.277497][ T5786] veth0_vlan: entered promiscuous mode [ 98.306023][ T5790] veth1_macvtap: entered promiscuous mode [ 98.333889][ T5798] veth0_vlan: entered promiscuous mode [ 98.372534][ T5794] veth0_vlan: entered promiscuous mode [ 98.387150][ T5786] veth1_vlan: entered promiscuous mode [ 98.403911][ T5798] veth1_vlan: entered promiscuous mode [ 98.435955][ T5794] veth1_vlan: entered promiscuous mode [ 98.453235][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.502366][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.558522][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574648][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.585413][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.595822][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.633611][ T5786] veth0_macvtap: entered promiscuous mode [ 98.643767][ T5794] veth0_macvtap: entered promiscuous mode [ 98.692778][ T5786] veth1_macvtap: entered promiscuous mode [ 98.727621][ T5798] veth0_macvtap: entered promiscuous mode [ 98.749542][ T5794] veth1_macvtap: entered promiscuous mode [ 98.800543][ T5798] veth1_macvtap: entered promiscuous mode [ 98.830728][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.844238][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.859960][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.877269][ T5791] Bluetooth: hci1: command tx timeout [ 98.887804][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.899312][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.912917][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.924624][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.938167][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.955466][ T5791] Bluetooth: hci0: command tx timeout [ 98.965450][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.977839][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.991051][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.041871][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.051939][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.063251][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.073851][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.088041][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.101395][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.112166][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.123819][ T5791] Bluetooth: hci3: command tx timeout [ 99.123838][ T5789] Bluetooth: hci2: command tx timeout [ 99.136783][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.150746][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.166703][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.178445][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.188706][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.198206][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.198300][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.218741][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.262999][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.280662][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.294358][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.305809][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.316922][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.328954][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.343292][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.410418][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.423414][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.434534][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.448279][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.460231][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.472565][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.485855][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.522365][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.532451][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.556134][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.568916][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.585168][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.596689][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.775432][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.795092][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.835765][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.858945][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.956487][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.971858][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.066877][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.095482][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.150831][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.167903][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.277845][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.341454][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.961012][ T5791] Bluetooth: hci1: command tx timeout [ 101.044511][ T5791] Bluetooth: hci0: command tx timeout [ 101.197130][ T5791] Bluetooth: hci2: command tx timeout [ 101.197143][ T5789] Bluetooth: hci3: command tx timeout [ 102.248362][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.258076][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.299174][ T5913] bridge0: entered allmulticast mode [ 102.393699][ T5914] bridge_slave_1: left allmulticast mode [ 102.417352][ T5914] bridge_slave_1: left promiscuous mode [ 102.425029][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.495748][ T5914] bridge_slave_0: left allmulticast mode [ 102.512968][ T5914] bridge_slave_0: left promiscuous mode [ 102.531093][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.904133][ T5935] syzkaller0: entered promiscuous mode [ 103.955008][ T5935] syzkaller0: entered allmulticast mode [ 104.145403][ C0] hrtimer: interrupt took 572005 ns [ 107.763057][ T5974] syzkaller0: entered promiscuous mode [ 107.782234][ T5974] syzkaller0: entered allmulticast mode [ 110.599666][ T5998] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.675526][ T5998] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.809290][ T6016] syzkaller0: entered promiscuous mode [ 111.834225][ T6016] syzkaller0: entered allmulticast mode [ 113.912368][ T6036] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 114.558893][ T48] wlan1: Trigger new scan to find an IBSS to join [ 116.159013][ T6065] syzkaller0: entered promiscuous mode [ 116.170154][ T6065] syzkaller0: entered allmulticast mode [ 116.560370][ T2953] wlan1: Trigger new scan to find an IBSS to join [ 117.519256][ T48] wlan1: Trigger new scan to find an IBSS to join [ 119.536557][ T6100] syzkaller0: entered promiscuous mode [ 119.549145][ T6100] syzkaller0: entered allmulticast mode [ 119.599440][ T48] wlan1: Creating new IBSS network, BSSID 22:44:55:3a:76:ad [ 120.565961][ T138] wlan1: Trigger new scan to find an IBSS to join [ 122.563746][ T1086] wlan1: Creating new IBSS network, BSSID 52:94:78:63:ed:24 [ 122.904619][ T6132] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.103'. [ 123.739274][ T6141] syzkaller0: entered promiscuous mode [ 123.762525][ T6141] syzkaller0: entered allmulticast mode [ 125.253980][ T6160] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.114'. [ 133.536283][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.545949][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.248639][ T6270] netlink: 'syz.3.157': attribute type 3 has an invalid length. [ 135.259825][ T6270] netlink: 'syz.3.157': attribute type 15 has an invalid length. [ 135.269967][ T6270] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.157'. [ 135.553907][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.576470][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.637366][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.674178][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.313740][ T6296] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 136.366718][ T6296] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.817072][ T6307] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 136.824822][ T6307] netlink: 'syz.0.169': attribute type 15 has an invalid length. [ 136.836586][ T6307] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.169'. [ 138.006635][ T6337] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.187'. [ 138.219334][ T6334] netlink: 'syz.0.186': attribute type 3 has an invalid length. [ 138.250278][ T6334] netlink: 'syz.0.186': attribute type 15 has an invalid length. [ 138.262349][ T6334] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.186'. [ 138.522783][ T5789] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 140.570765][ T6367] netlink: 'syz.2.198': attribute type 5 has an invalid length. [ 140.698499][ T6374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.934706][ T5789] Bluetooth: hci0: Malformed LE Event: 0x0d [ 141.004513][ T6384] netlink: 'syz.3.202': attribute type 3 has an invalid length. [ 141.012685][ T6384] netlink: 'syz.3.202': attribute type 15 has an invalid length. [ 141.021035][ T6384] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.202'. [ 141.952460][ T5789] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 141.952531][ T5789] Bluetooth: hci1: Malformed LE Event: 0x02 [ 143.169862][ T6413] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 143.177899][ T6413] netlink: 'syz.2.217': attribute type 15 has an invalid length. [ 143.186032][ T6413] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.217'. [ 149.316841][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.344927][ T6457] syzkaller0: entered promiscuous mode [ 149.362201][ T6457] syzkaller0: entered allmulticast mode [ 149.385349][ T6457] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 149.511978][ T6465] syz.1.241[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.512136][ T6465] syz.1.241[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.039549][ T6492] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.252'. [ 152.052097][ T6502] syzkaller0: entered promiscuous mode [ 152.072696][ T6502] syzkaller0: entered allmulticast mode [ 158.583472][ T6548] netlink: 'syz.0.279': attribute type 2 has an invalid length. [ 158.603819][ T6548] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.279'. [ 159.187779][ T6568] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.280'. [ 159.549889][ T6566] syzkaller0: entered promiscuous mode [ 159.855002][ T6566] syzkaller0: entered allmulticast mode [ 169.250567][ T6686] netlink: 539 bytes leftover after parsing attributes in process `syz.0.323'. [ 169.698316][ T6700] netlink: 172 bytes leftover after parsing attributes in process `syz.0.329'. [ 169.716655][ T5789] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 169.924681][ T5791] Bluetooth: hci1: Malformed HCI Event [ 171.755302][ T5791] Bluetooth: hci0: command tx timeout [ 171.815117][ T5791] Bluetooth: hci3: Malformed LE Event: 0x0d [ 173.761295][ T6760] syz.2.356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 173.779322][ T6760] CPU: 1 PID: 6760 Comm: syz.2.356 Not tainted 6.6.99-syzkaller #0 [ 173.787383][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.797512][ T6760] Call Trace: [ 173.800852][ T6760] [ 173.803834][ T6760] dump_stack_lvl+0x16c/0x230 [ 173.808576][ T6760] ? show_regs_print_info+0x20/0x20 [ 173.813842][ T6760] ? load_image+0x3b0/0x3b0 [ 173.818420][ T6760] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 173.824905][ T6760] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 173.831474][ T6760] warn_alloc+0x210/0x300 [ 173.835961][ T6760] ? stack_trace_save+0x9c/0xe0 [ 173.840871][ T6760] ? zone_watermark_ok_safe+0x230/0x230 [ 173.846493][ T6760] ? kasan_set_track+0x5f/0x70 [ 173.851309][ T6760] ? kasan_set_track+0x4e/0x70 [ 173.856117][ T6760] ? __kasan_kmalloc+0x8f/0xa0 [ 173.860931][ T6760] ? xsk_init_queue+0xb0/0x110 [ 173.865762][ T6760] ? xsk_setsockopt+0x4db/0x6f0 [ 173.870692][ T6760] ? do_sock_setsockopt+0x175/0x1a0 [ 173.875949][ T6760] ? __x64_sys_setsockopt+0x184/0x200 [ 173.881388][ T6760] __vmalloc_node_range+0x126/0x1320 [ 173.886757][ T6760] ? free_vm_area+0x50/0x50 [ 173.891338][ T6760] vmalloc_user+0x74/0x80 [ 173.895730][ T6760] ? xskq_create+0xbf/0x170 [ 173.900272][ T6760] xskq_create+0xbf/0x170 [ 173.904646][ T6760] xsk_init_queue+0xb0/0x110 [ 173.909325][ T6760] xsk_setsockopt+0x4db/0x6f0 [ 173.914265][ T6760] ? xsk_poll+0x670/0x670 [ 173.918662][ T6760] ? __fget_files+0x28/0x4d0 [ 173.923313][ T6760] ? aa_sock_opt_perm+0x74/0x100 [ 173.928307][ T6760] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 173.933927][ T6760] ? security_socket_setsockopt+0x7e/0xa0 [ 173.939877][ T6760] ? xsk_poll+0x670/0x670 [ 173.944273][ T6760] do_sock_setsockopt+0x175/0x1a0 [ 173.949357][ T6760] ? __fdget+0x180/0x210 [ 173.953660][ T6760] __x64_sys_setsockopt+0x184/0x200 [ 173.958921][ T6760] do_syscall_64+0x55/0xb0 [ 173.963476][ T6760] ? clear_bhb_loop+0x40/0x90 [ 173.968465][ T6760] ? clear_bhb_loop+0x40/0x90 [ 173.973199][ T6760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.979418][ T6760] RIP: 0033:0x7f8b8958e9a9 [ 173.984084][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.003927][ T6760] RSP: 002b:00007f8b8a432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.012665][ T6760] RAX: ffffffffffffffda RBX: 00007f8b897b6080 RCX: 00007f8b8958e9a9 [ 174.020695][ T6760] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 174.028718][ T6760] RBP: 00007f8b89610d69 R08: 0000000000000004 R09: 0000000000000000 [ 174.036837][ T6760] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 174.045472][ T6760] R13: 0000000000000001 R14: 00007f8b897b6080 R15: 00007ffc1b3cf328 [ 174.053517][ T6760] [ 174.075606][ T6760] Mem-Info: [ 174.082490][ T6760] active_anon:13160 inactive_anon:0 isolated_anon:0 [ 174.082490][ T6760] active_file:13632 inactive_file:39848 isolated_file:0 [ 174.082490][ T6760] unevictable:768 dirty:201 writeback:0 [ 174.082490][ T6760] slab_reclaimable:9865 slab_unreclaimable:98571 [ 174.082490][ T6760] mapped:24848 shmem:1361 pagetables:585 [ 174.082490][ T6760] sec_pagetables:0 bounce:0 [ 174.082490][ T6760] kernel_misc_reclaimable:0 [ 174.082490][ T6760] free:1327994 free_pcp:11373 free_cma:0 [ 174.228793][ T6760] Node 0 active_anon:52840kB inactive_anon:0kB active_file:54528kB inactive_file:159188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96092kB dirty:804kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11196kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 174.270274][ T6760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 174.318223][ T6760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.381680][ T6760] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 174.388201][ T6760] Node 0 DMA32 free:1404268kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52688kB inactive_anon:0kB active_file:54528kB inactive_file:157872kB unevictable:1536kB writepending:804kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:25576kB local_pcp:18192kB free_cma:0kB [ 174.432912][ T6760] lowmem_reserve[]: 0 0 1 1 1 [ 174.447358][ T6760] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.505230][ T6760] lowmem_reserve[]: 0 0 0 0 0 [ 174.513774][ T6760] Node 1 Normal free:3892332kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21420kB local_pcp:10056kB free_cma:0kB [ 174.580649][ T6760] lowmem_reserve[]: 0 0 0 0 0 [ 174.580856][ T5791] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 174.585740][ T5791] Bluetooth: unknown link type 88 [ 174.598239][ T5791] Bluetooth: hci3: connection err: -111 [ 174.615092][ T6760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.631469][ T6760] Node 0 DMA32: 1143*4kB (UME) 420*8kB (UE) 457*16kB (UME) 484*32kB (UME) 484*64kB (UME) 151*128kB (ME) 84*256kB (UME) 30*512kB (ME) 6*1024kB (M) 5*2048kB (ME) 310*4096kB (M) = 1404044kB [ 174.650733][ T6760] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 174.663326][ T6760] Node 1 Normal: 223*4kB (UME) 60*8kB (UME) 49*16kB (UME) 68*32kB (UME) 20*64kB (UME) 5*128kB (UME) 2*256kB (UM) 1*512kB (E) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3892332kB [ 174.681627][ T6760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.691599][ T6760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.701040][ T6760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.711113][ T6760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.721224][ T6760] 54841 total pagecache pages [ 174.726091][ T6760] 0 pages in swap cache [ 174.730300][ T6760] Free swap = 124996kB [ 174.734502][ T6760] Total swap = 124996kB [ 174.738854][ T6760] 2097051 pages RAM [ 174.742711][ T6760] 0 pages HighMem/MovableOnly [ 174.754977][ T6760] 416137 pages reserved [ 174.759200][ T6760] 0 pages cma reserved [ 175.132224][ T6786] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.367'. [ 175.183515][ T6786] netlink: zone id is out of range [ 175.191499][ T6786] netlink: del zone limit has 8 unknown bytes [ 175.562672][ T6794] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 175.570745][ T6794] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.371'. [ 176.502171][ T6788] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.701165][ T6801] syzkaller0: entered promiscuous mode [ 176.723061][ T6801] syzkaller0: entered allmulticast mode [ 178.123151][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 178.557713][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 182.281996][ T6884] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.289304][ T6884] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.488461][ T6895] syzkaller0: entered promiscuous mode [ 183.506017][ T6895] syzkaller0: entered allmulticast mode [ 183.595178][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 183.934664][ T6900] syzkaller0: entered promiscuous mode [ 183.948836][ T6900] syzkaller0: entered allmulticast mode [ 184.631158][ T48] wlan1: Creating new IBSS network, BSSID 2a:f2:58:fb:b2:bc [ 185.036862][ T6921] netlink: 'syz.0.424': attribute type 3 has an invalid length. [ 185.051257][ T6921] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 185.063033][ T6921] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.424'. [ 185.881250][ T5791] Bluetooth: hci2: Dropping invalid advertising data [ 185.888951][ T5791] Bluetooth: hci2: unknown advertising packet type: 0xff [ 185.888980][ T5791] Bluetooth: hci2: Malformed LE Event: 0x02 [ 187.692506][ T6951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.436'. [ 187.741289][ T6951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.436'. [ 187.809011][ T6955] netlink: 'syz.1.438': attribute type 3 has an invalid length. [ 187.825418][ T6955] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 187.835542][ T6955] netlink: 'syz.1.438': attribute type 7 has an invalid length. [ 187.843267][ T6955] netlink: 'syz.1.438': attribute type 8 has an invalid length. [ 187.874310][ T6955] netlink: 'syz.1.438': attribute type 7 has an invalid length. [ 187.891587][ T6955] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.438'. [ 192.294135][ T7023] syzkaller0: entered promiscuous mode [ 192.308731][ T7023] syzkaller0: entered allmulticast mode [ 192.316620][ T7031] syz.0.472[7031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.316897][ T7031] syz.0.472[7031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.103677][ T7047] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.477'. [ 194.964256][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.970876][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.443358][ T7084] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 196.451298][ T7084] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 196.459131][ T7084] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.490'. [ 196.471758][ T7085] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 196.482332][ T7085] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 196.494067][ T7085] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.490'. [ 198.169454][ T5791] Bluetooth: hci1: Malformed LE Event: 0x0d [ 198.419059][ T7143] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.515'. [ 199.842068][ T7141] netlink: 140 bytes leftover after parsing attributes in process `syz.2.514'. [ 200.633428][ T7184] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.535'. [ 200.873508][ T7192] syz.1.539[7192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.873743][ T7192] syz.1.539[7192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.089507][ T7200] wg2: entered promiscuous mode [ 201.110882][ T7200] wg2: entered allmulticast mode [ 201.423645][ T7217] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.550'. [ 201.966437][ T7231] -1: renamed from syzkaller0 [ 202.544832][ T7259] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.570'. [ 202.895380][ T7274] netlink: 'syz.3.578': attribute type 17 has an invalid length. [ 202.910194][ T7274] netlink: 'syz.3.578': attribute type 16 has an invalid length. [ 202.918628][ T7274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.578'. [ 203.275495][ T48] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 203.286185][ T48] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 203.556018][ T7299] wg2: left promiscuous mode [ 203.560702][ T7299] wg2: left allmulticast mode [ 204.882336][ T7322] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 204.907014][ T7322] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.600'. [ 205.172257][ T7327] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.601'. [ 205.187212][ T7327] netlink: zone id is out of range [ 205.199894][ T7327] netlink: zone id is out of range [ 205.213234][ T7327] netlink: zone id is out of range [ 205.218863][ T7327] netlink: zone id is out of range [ 205.224261][ T7327] netlink: zone id is out of range [ 205.231956][ T7327] netlink: zone id is out of range [ 205.239392][ T7327] netlink: zone id is out of range [ 205.244709][ T7327] netlink: zone id is out of range [ 205.254190][ T7327] netlink: zone id is out of range [ 205.259876][ T7327] netlink: zone id is out of range [ 207.047720][ T5791] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 207.573735][ T7360] syzkaller0: entered promiscuous mode [ 207.589720][ T7360] syzkaller0: entered allmulticast mode [ 210.823067][ T5791] Bluetooth: hci2: Unknown advertising packet type: 0x70 [ 210.823132][ T5791] Bluetooth: hci2: Malformed LE Event: 0x0d [ 210.866546][ T7388] syz.1.623 uses obsolete (PF_INET,SOCK_PACKET) [ 211.182021][ T7399] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.626'. [ 212.057843][ T7431] syz.2.637[7431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.058149][ T7431] syz.2.637[7431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.078653][ T7431] syz.2.637[7431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.090676][ T7431] syz.2.637[7431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.419544][ T7460] netlink: 'syz.2.652': attribute type 9 has an invalid length. [ 213.451648][ T7460] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.652'. [ 214.701001][ T2953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.108593][ T5793] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 217.529289][ T5789] Bluetooth: hci3: command tx timeout [ 217.529312][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 217.536386][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 217.541854][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 217.640113][ T7523] netlink: 'syz.2.679': attribute type 12 has an invalid length. [ 217.649237][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.679'. [ 217.719009][ T7525] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.678'. [ 217.739642][ T7521] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.678'. [ 217.904730][ T7531] syzkaller0: entered promiscuous mode [ 217.915236][ T7531] syzkaller0: entered allmulticast mode [ 219.331512][ T7567] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 219.339459][ T7567] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.696'. [ 220.175632][ T7575] syzkaller0: entered promiscuous mode [ 220.189344][ T7575] syzkaller0: entered allmulticast mode [ 222.728067][ T7615] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 222.771083][ T7615] team0: Device ipvlan1 failed to register rx_handler [ 223.160921][ T7627] netlink: 'syz.1.722': attribute type 21 has an invalid length. [ 223.171340][ T7627] netlink: 'syz.1.722': attribute type 12 has an invalid length. [ 223.180889][ T7627] netlink: 'syz.1.722': attribute type 13 has an invalid length. [ 223.191673][ T7627] netlink: 'syz.1.722': attribute type 14 has an invalid length. [ 223.203527][ T7627] netlink: 'syz.1.722': attribute type 15 has an invalid length. [ 223.214579][ T7627] netlink: 'syz.1.722': attribute type 16 has an invalid length. [ 223.224042][ T7627] netlink: 'syz.1.722': attribute type 19 has an invalid length. [ 223.233457][ T7627] netlink: 'syz.1.722': attribute type 21 has an invalid length. [ 223.249708][ T7627] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.722'. [ 223.748538][ T7644] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.731'. [ 223.963182][ T5791] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 226.320608][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 226.327967][ T5791] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 230.023345][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.793'. [ 230.374771][ T7807] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.798'. [ 230.401039][ T7807] net_ratelimit: 43 callbacks suppressed [ 230.401077][ T7807] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 233.384343][ T7840] syz.2.812[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.384483][ T7840] syz.2.812[7840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.228338][ T5791] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 234.355230][ T5791] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 236.144270][ T7885] validate_nla: 2 callbacks suppressed [ 236.144291][ T7885] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 236.191757][ T7885] geneve0: entered promiscuous mode [ 236.251361][ T7885] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 236.395135][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 236.783131][ T7914] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.846'. [ 237.144696][ T7922] Driver unsupported XDP return value 0 on prog (id 510) dev N/A, expect packet loss! [ 238.770320][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.855'. [ 238.935335][ T7942] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 238.953869][ T7942] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.857'. [ 238.988243][ T5791] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 239.030626][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.057418][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.084590][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.115428][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.481834][ T7990] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 242.503358][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.875'. [ 244.149253][ T7990] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 244.166810][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.875'. [ 244.603610][ T5791] Bluetooth: hci3: ISO packet for unknown connection handle 2681 [ 245.725232][ T1086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 246.154207][ T8028] __sock_release: fasync list not empty! [ 246.548050][ T8043] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 246.586992][ T8043] syzkaller0: entered promiscuous mode [ 246.592555][ T8043] syzkaller0: entered allmulticast mode [ 248.202462][ T8057] syz.3.903 (8057) used obsolete PPPIOCDETACH ioctl [ 248.549970][ T8069] veth1_macvtap: left promiscuous mode [ 249.022136][ T8069] veth1_macvtap: entered promiscuous mode [ 249.028293][ T8069] macsec0: entered promiscuous mode [ 249.034130][ T8069] macsec0: entered allmulticast mode [ 249.040874][ T8069] veth1_macvtap: entered allmulticast mode [ 249.403254][ T8093] netlink: 'syz.3.919': attribute type 10 has an invalid length. [ 249.423368][ T8093] netlink: 55 bytes leftover after parsing attributes in process `syz.3.919'. [ 251.869777][ T8111] netlink: 'syz.3.927': attribute type 10 has an invalid length. [ 251.877760][ T8111] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 251.889643][ T8111] team0: Port device virt_wifi0 added [ 251.897337][ T8112] netlink: 'syz.3.927': attribute type 10 has an invalid length. [ 253.201766][ T8143] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.393873][ T8162] netlink: 'syz.3.944': attribute type 39 has an invalid length. [ 253.541185][ T8164] netlink: 830 bytes leftover after parsing attributes in process `syz.0.945'. [ 253.844307][ T8179] syzkaller0: entered promiscuous mode [ 253.849910][ T8179] syzkaller0: entered allmulticast mode [ 254.949045][ T5791] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 256.112771][ T5791] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 256.400239][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.410825][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.469227][ T8240] netlink: 'syz.2.976': attribute type 21 has an invalid length. [ 257.535538][ T5791] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 257.551211][ T5791] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 257.560995][ T5791] CPU: 1 PID: 5791 Comm: kworker/u5:3 Not tainted 6.6.99-syzkaller #0 [ 257.569217][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.579314][ T5791] Workqueue: hci0 hci_rx_work [ 257.584056][ T5791] Call Trace: [ 257.587389][ T5791] [ 257.590363][ T5791] dump_stack_lvl+0x16c/0x230 [ 257.595090][ T5791] ? show_regs_print_info+0x20/0x20 [ 257.600432][ T5791] ? load_image+0x3b0/0x3b0 [ 257.605015][ T5791] sysfs_create_dir_ns+0x256/0x280 [ 257.610215][ T5791] ? hci_rx_work+0x43a/0xd80 [ 257.614831][ T5791] ? sysfs_warn_dup+0xa0/0xa0 [ 257.619555][ T5791] ? do_raw_spin_unlock+0x121/0x230 [ 257.624805][ T5791] kobject_add_internal+0x6b8/0xc70 [ 257.630062][ T5791] kobject_add+0x156/0x220 [ 257.634503][ T5791] ? __rwlock_init+0x150/0x150 [ 257.639296][ T5791] ? kobject_init+0x1e0/0x1e0 [ 257.643998][ T5791] ? _raw_spin_unlock+0x28/0x40 [ 257.649012][ T5791] ? get_device_parent+0x366/0x390 [ 257.654195][ T5791] device_add+0x408/0xc20 [ 257.658561][ T5791] hci_conn_add_sysfs+0xd5/0x1e0 [ 257.663565][ T5791] le_conn_complete_evt+0xc37/0x1220 [ 257.668907][ T5791] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 257.675275][ T5791] ? bt_info+0x160/0x160 [ 257.679551][ T5791] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 257.685217][ T5791] ? skb_pull_data+0xfb/0x200 [ 257.690021][ T5791] hci_le_conn_complete_evt+0x187/0x440 [ 257.695684][ T5791] ? hci_remote_host_features_evt+0x160/0x160 [ 257.701889][ T5791] hci_event_packet+0x795/0x1210 [ 257.706872][ T5791] ? bis_list+0x290/0x290 [ 257.711242][ T5791] ? lockdep_hardirqs_on+0x98/0x150 [ 257.716479][ T5791] ? hci_send_to_monitor+0xd7/0x4f0 [ 257.721717][ T5791] hci_rx_work+0x43a/0xd80 [ 257.726177][ T5791] ? process_scheduled_works+0x957/0x15b0 [ 257.731929][ T5791] process_scheduled_works+0xa45/0x15b0 [ 257.737540][ T5791] ? assign_work+0x400/0x400 [ 257.742179][ T5791] ? assign_work+0x39e/0x400 [ 257.746803][ T5791] worker_thread+0xa55/0xfc0 [ 257.751447][ T5791] kthread+0x2fa/0x390 [ 257.755892][ T5791] ? pr_cont_work+0x560/0x560 [ 257.760785][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 257.765495][ T5791] ret_from_fork+0x48/0x80 [ 257.769954][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 257.774574][ T5791] ret_from_fork_asm+0x11/0x20 [ 257.779496][ T5791] [ 257.784559][ T5791] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 257.798557][ T5791] Bluetooth: hci0: failed to register connection device [ 259.427516][ T8280] syzkaller0: entered promiscuous mode [ 259.433203][ T8280] syzkaller0: entered allmulticast mode [ 262.608663][ T8316] syzkaller0: entered promiscuous mode [ 262.614227][ T8316] syzkaller0: entered allmulticast mode [ 264.483363][ T8333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1011'. [ 264.492882][ T8347] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1018'. [ 264.647298][ T8351] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1021'. [ 265.194047][ T8375] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1030'. [ 265.796128][ T8400] netlink: 'syz.3.1040': attribute type 39 has an invalid length. [ 266.229613][ T8420] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1048'. [ 267.831862][ T8444] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1057'. [ 268.764652][ T8438] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1054'. [ 268.906725][ T8451] syzkaller0: entered promiscuous mode [ 268.912295][ T8451] syzkaller0: entered allmulticast mode [ 270.601569][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1065'. [ 272.197077][ T8527] …: port 1(ip6gretap0) entered blocking state [ 272.204000][ T8527] …: port 1(ip6gretap0) entered disabled state [ 272.211703][ T8527] ip6gretap0: entered allmulticast mode [ 272.219602][ T8527] ip6gretap0: entered promiscuous mode [ 272.301741][ T8530] netlink: 'syz.0.1089': attribute type 33 has an invalid length. [ 272.312958][ T8530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1089'. [ 272.323513][ T8530] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 272.504475][ T8535] syzkaller0: entered promiscuous mode [ 272.525011][ T8535] syzkaller0: entered allmulticast mode [ 274.182616][ T8542] netlink: 'syz.0.1093': attribute type 64 has an invalid length. [ 274.223208][ T8549] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1096'. [ 274.284012][ T8552] pim6reg1: entered promiscuous mode [ 274.291876][ T8552] pim6reg1: entered allmulticast mode [ 276.746116][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.753901][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.763603][ T8581] bridge0: entered allmulticast mode [ 276.790574][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.797881][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.805517][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.812760][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.830831][ T8584] bridge0: entered promiscuous mode [ 276.839180][ T8594] netlink: 'syz.0.1114': attribute type 21 has an invalid length. [ 276.856310][ T8594] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.871831][ T8594] IPv6: Can't replace route, no match found [ 276.905003][ T8596] netlink: 'syz.3.1115': attribute type 19 has an invalid length. [ 276.935267][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1115'. [ 277.348143][ T8610] syz.3.1121[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.348406][ T8610] syz.3.1121[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.557447][ T8623] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1125'. [ 279.980116][ T5791] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 281.192679][ T5791] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 282.558012][ T48] wlan1: Trigger new scan to find an IBSS to join [ 282.581858][ T48] ================================================================================ [ 282.604119][ T48] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 282.612086][ T48] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 282.625471][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted 6.6.99-syzkaller #0 [ 282.633513][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.643613][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 282.649909][ T48] Call Trace: [ 282.653227][ T48] [ 282.656177][ T48] dump_stack_lvl+0x16c/0x230 [ 282.660869][ T48] ? show_regs_print_info+0x20/0x20 [ 282.666097][ T48] ? load_image+0x3b0/0x3b0 [ 282.670644][ T48] ? mutex_lock_nested+0x20/0x20 [ 282.675605][ T48] ubsan_epilogue+0xa/0x30 [ 282.680039][ T48] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 282.685798][ T48] ieee80211_request_ibss_scan+0x4eb/0x790 [ 282.691651][ T48] ieee80211_ibss_work+0xdfd/0x10c0 [ 282.696877][ T48] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 282.703217][ T48] ? mark_lock+0x94/0x320 [ 282.707579][ T48] ? ieee80211_iface_work+0xbca/0xc70 [ 282.712983][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.718221][ T48] cfg80211_wiphy_work+0x225/0x260 [ 282.723459][ T48] ? process_scheduled_works+0x957/0x15b0 [ 282.729205][ T48] process_scheduled_works+0xa45/0x15b0 [ 282.734807][ T48] ? assign_work+0x400/0x400 [ 282.739438][ T48] ? assign_work+0x39e/0x400 [ 282.744055][ T48] worker_thread+0xa55/0xfc0 [ 282.748674][ T48] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 282.754601][ T48] ? _raw_spin_unlock+0x40/0x40 [ 282.759483][ T48] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 282.765432][ T48] kthread+0x2fa/0x390 [ 282.769521][ T48] ? pr_cont_work+0x560/0x560 [ 282.774236][ T48] ? kthread_blkcg+0xd0/0xd0 [ 282.778860][ T48] ret_from_fork+0x48/0x80 [ 282.783299][ T48] ? kthread_blkcg+0xd0/0xd0 [ 282.787911][ T48] ret_from_fork_asm+0x11/0x20 [ 282.792726][ T48] [ 282.806759][ T48] ================================================================================ [ 282.826489][ T48] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 282.833741][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted 6.6.99-syzkaller #0 [ 282.841740][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.851811][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 282.858100][ T48] Call Trace: [ 282.861394][ T48] [ 282.864342][ T48] dump_stack_lvl+0x16c/0x230 [ 282.869047][ T48] ? show_regs_print_info+0x20/0x20 [ 282.874269][ T48] ? load_image+0x3b0/0x3b0 [ 282.878820][ T48] panic+0x2c0/0x710 [ 282.882747][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 282.887286][ T48] ? mutex_lock_nested+0x20/0x20 [ 282.892251][ T48] check_panic_on_warn+0x84/0xa0 [ 282.897212][ T48] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 282.902993][ T48] ieee80211_request_ibss_scan+0x4eb/0x790 [ 282.908839][ T48] ieee80211_ibss_work+0xdfd/0x10c0 [ 282.914083][ T48] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 282.920435][ T48] ? mark_lock+0x94/0x320 [ 282.924794][ T48] ? ieee80211_iface_work+0xbca/0xc70 [ 282.930198][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.935433][ T48] cfg80211_wiphy_work+0x225/0x260 [ 282.940578][ T48] ? process_scheduled_works+0x957/0x15b0 [ 282.946408][ T48] process_scheduled_works+0xa45/0x15b0 [ 282.952025][ T48] ? assign_work+0x400/0x400 [ 282.956648][ T48] ? assign_work+0x39e/0x400 [ 282.961276][ T48] worker_thread+0xa55/0xfc0 [ 282.965885][ T48] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 282.971803][ T48] ? _raw_spin_unlock+0x40/0x40 [ 282.976678][ T48] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 282.982620][ T48] kthread+0x2fa/0x390 [ 282.986703][ T48] ? pr_cont_work+0x560/0x560 [ 282.991421][ T48] ? kthread_blkcg+0xd0/0xd0 [ 282.996043][ T48] ret_from_fork+0x48/0x80 [ 283.000497][ T48] ? kthread_blkcg+0xd0/0xd0 [ 283.005122][ T48] ret_from_fork_asm+0x11/0x20 [ 283.009960][ T48] [ 283.013432][ T48] Kernel Offset: disabled [ 283.017939][ T48] Rebooting in 86400 seconds..